GPO for force a user to logoff at a specified time

[Raffi Mesdjian]

I am trying to use GPO to force a user or specific users
to be logged off based on the user account "logon hours"
option.

At the Domain level I have "enabled":

Microsoft network server: Disconnect clients when logon
hours expire

Network security: Force logoff when logon hours expire

Neither of these GPO's seem to do the trick. Any ideas?

 

[Steven L Umbach]

Those options will log a user off of domain resources, but not the local machine. You
could use the AT command to logoff a user at a particular time, possibly doing it for
a large number of users with like logoff times by using the AT command via a startup
script. You will need to test it out but logoff or shutdown should work and is
probably already on most computers. I have found that I need to use the /interactive
switch to get it to work. PsShutdown is free from SysInternals and also works well
for logoff/shutdown/reboot needs and has many options and will also work with
Scheduled Tasks to logoff a user. --- Steve